
$ rpki-client -vvvf rpki-repo.registro.br/repo/2WBMKekR2h39KDGx6cvYaBhRW9TxmPt4me2VL683CUaW/0/3ABBAFC1162A8BAEA4DE6D2D8324BCC6D01983B1.mft
File: 3ABBAFC1162A8BAEA4DE6D2D8324BCC6D01983B1.mft (raw, json)
Hash identifier: UDikwMK3XCDfyhyGa0CuyyHR2miwB9z8MUBpYABnz0Y=
Subject key identifier: 4C:6D:71:83:11:83:42:43:ED:E0:B9:40:A3:98:DC:2D:26:91:BF:C3
Authority key identifier: 3A:BB:AF:C1:16:2A:8B:AE:A4:DE:6D:2D:83:24:BC:C6:D0:19:83:B1
Certificate issuer: /CN=3ABBAFC1162A8BAEA4DE6D2D8324BCC6D01983B1
Certificate serial: 45190C4201B04F17C966F0BB302E14BFA91F9643
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3ABBAFC1162A8BAEA4DE6D2D8324BCC6D01983B1.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2WBMKekR2h39KDGx6cvYaBhRW9TxmPt4me2VL683CUaW/0/3ABBAFC1162A8BAEA4DE6D2D8324BCC6D01983B1.mft
Manifest number: B9
Signing time: Mon 24 Aug 2026 03:06:25 +0000
Manifest this update: Mon 24 Aug 2026 03:01:25 +0000
Manifest next update: Tue 25 Aug 2026 06:56:25 +0000
Files and hashes: 1: 323830343a6261303a3a2f33322d313238203d3e203532383031.roa (hash: /CT4i5Dgkj/kOc21Ova2ordHmSl3GCcuEna1raYeE78=)
2: 3ABBAFC1162A8BAEA4DE6D2D8324BCC6D01983B1.crl (hash: EfFYJYVVT/og2B3H6oHJLUvtsNjhzWxt0yqe5S10biU=)
3: 3137372e35322e38382e302f32312d3332203d3e203532383031.roa (hash: Z3WfPn031D83DBn+tzGOvO0yAPY1SVwOPvrF4MtzS1E=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2WBMKekR2h39KDGx6cvYaBhRW9TxmPt4me2VL683CUaW/0/3ABBAFC1162A8BAEA4DE6D2D8324BCC6D01983B1.crl
rsync://rpki-repo.registro.br/repo/2WBMKekR2h39KDGx6cvYaBhRW9TxmPt4me2VL683CUaW/0/3ABBAFC1162A8BAEA4DE6D2D8324BCC6D01983B1.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3ABBAFC1162A8BAEA4DE6D2D8324BCC6D01983B1.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 25 Aug 2026 06:56:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:19:0c:42:01:b0:4f:17:c9:66:f0:bb:30:2e:14:bf:a9:1f:96:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ABBAFC1162A8BAEA4DE6D2D8324BCC6D01983B1
Validity
Not Before: Aug 24 03:01:25 2026 GMT
Not After : Aug 25 06:56:25 2026 GMT
Subject: CN=4C6D718311834243EDE0B940A398DC2D2691BFC3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:7d:fc:a4:87:2a:b8:4c:d4:66:22:87:ee:c6:
cf:aa:aa:20:0d:43:36:eb:d6:f8:14:d8:92:c8:71:
41:d5:e8:cd:b4:38:22:99:57:c4:a1:63:eb:99:9c:
b8:6a:93:a8:d0:7e:a1:67:f4:63:8d:d9:f8:6c:d9:
10:8f:61:f3:cc:fe:15:00:32:ed:cd:b0:b3:b4:51:
c5:59:32:1b:1f:57:22:31:2a:4a:84:f6:98:4d:dd:
1c:e5:7b:b6:dc:9e:47:51:12:da:5c:55:19:2d:0a:
f7:a1:ef:85:7e:c2:65:83:7f:22:78:e2:7f:27:6f:
2a:5f:0f:cd:a5:6e:fd:83:84:1d:f9:12:01:8a:3e:
15:8b:eb:8d:b5:79:f2:86:fe:41:b8:8f:39:f7:9a:
bc:c8:62:75:0f:6b:df:15:b3:3b:8a:65:6d:9d:f8:
3e:82:80:24:0f:87:8a:ae:74:d1:7a:b9:e2:be:1f:
e6:6d:1b:7f:2a:59:19:67:4e:66:5e:35:33:bb:cc:
84:af:4e:39:33:a1:5c:48:4e:34:0f:15:1a:ab:b2:
3b:d9:3a:c5:da:99:a4:aa:28:76:f5:77:91:ce:b8:
1e:ec:88:d8:f4:8a:d7:9c:78:b9:10:2c:e5:c2:f9:
13:fe:61:ff:7b:12:96:44:e1:b9:b8:a9:e9:70:6c:
11:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:6D:71:83:11:83:42:43:ED:E0:B9:40:A3:98:DC:2D:26:91:BF:C3
X509v3 Authority Key Identifier:
keyid:3A:BB:AF:C1:16:2A:8B:AE:A4:DE:6D:2D:83:24:BC:C6:D0:19:83:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2WBMKekR2h39KDGx6cvYaBhRW9TxmPt4me2VL683CUaW/0/3ABBAFC1162A8BAEA4DE6D2D8324BCC6D01983B1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3ABBAFC1162A8BAEA4DE6D2D8324BCC6D01983B1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2WBMKekR2h39KDGx6cvYaBhRW9TxmPt4me2VL683CUaW/0/3ABBAFC1162A8BAEA4DE6D2D8324BCC6D01983B1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:e4:2d:05:54:0e:72:7c:77:60:05:50:58:70:f7:eb:a5:a8:
f1:56:29:74:c4:66:e1:93:fd:8f:9d:a1:af:61:c6:90:b6:a9:
31:1f:28:8b:88:23:1e:4f:aa:ff:52:9f:43:13:83:7f:36:3e:
b4:66:bb:47:a0:a5:5e:5c:fc:05:10:3f:6b:c2:fb:25:5b:88:
37:9c:31:1d:5e:8e:fc:1d:9f:a2:1b:1e:3b:01:04:b1:f4:f1:
95:8f:52:ff:fd:9e:84:0c:8f:8d:58:fd:f6:54:2e:f5:8b:f5:
45:71:1c:e2:d0:11:19:3a:8a:ac:60:55:34:c1:6a:b3:b5:06:
d2:9b:ab:e2:4d:a4:b1:c2:dc:c7:b9:d2:fe:d2:bd:68:16:d8:
f4:bd:f2:0a:ef:ca:ad:4d:6d:05:05:c4:f9:cd:37:fe:0d:19:
bc:ea:71:cf:ca:4e:18:eb:22:5d:86:6f:46:2e:b3:4d:89:e2:
c9:55:b9:e1:e9:70:73:26:db:3c:6f:bb:57:bc:bc:61:c3:96:
2a:49:71:08:f9:37:ff:63:ef:30:3c:9e:4f:d5:71:d8:f8:53:
7f:bc:c7:1d:0c:5d:50:89:8d:27:c3:53:a9:a3:a5:36:ff:b9:
f9:5b:04:ac:5d:2f:a9:27:8e:fa:86:2c:54:4f:8d:4e:18:f9:
af:78:80:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 13:24:33 2026 by rpki-client